Nessus Plugin #15040

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA203] DSA-203-1 smb2www

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-203-1 smb2www

Version:

$Revision: 1.4 $

Cve_id:

CAN-2002-1342

Bugtraq_id:

-

Xrefs:

DSA:203

Description:

Robert Luberda found a security problem in smb2www, a Windows Network
client that is accessible through a web browser. This could lead a
remote attacker to execute arbitrary programs under the user id
www-data on the host where smb2www is running.
This problem has been fixed in version 980804-16.1 for the current
stable distribution (woody), in version 980804-8.1 of the old stable
distribution (potato) and in version 980804-17 for the unstable
distribution (sid).
We recommend that you upgrade your smb2www package immediately.


Solution : http://www.debian.org/security/2002/dsa-203
Risk factor : High